domin-network[.]entrance-cryptolist[.]com

Analysis of domin-network.entrance-cryptolist.com indicates active generic phishing infrastructure as of the report date, July 29, 2026. The domain was registered on June 17, 2024 through Key-Systems GmbH and resolves to the IPv4 address 188.114.97.3. Authoritative nameservers are listed as daisy.ns.cloudflare.com and sri.ns.cloudflare.com, confirming that the domain is hosted behind Cloudflare’s DNS platform. VirusTotal records show that 15 of 91 scanning engines have flagged the domain, suggesting a moderate level of confidence among automated detectors.

The domain is currently listed on at least one public security blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing the assessment of malicious intent. No public information is available regarding SSL certificate details, HTTP response codes, or the page title, indicating that those artifacts have not yet been harvested or shared in open‑source intelligence feeds. Consequently, defenders lack concrete evidence of the site’s content and must rely on the observed infrastructure signals.

Given the Cloudflare front‑end, the underlying hosting may be abstracted, but the IP address 188.114.97.3 should be treated as a high‑risk indicator and added to network‑level deny lists. Organizations are advised to block the domain at DNS resolvers, incorporate the IP into firewall deny rules, and monitor outbound connections for attempts to reach the address. Continuous re‑inspection of the domain through sandboxing or URL‑reputation services is recommended, as further payload delivery or credential‑phishing pages may be deployed in future iterations.